$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F7C832A8721511EFA7D82D3EC4F9AE02.roa File: F7C832A8721511EFA7D82D3EC4F9AE02.roa (raw, json) Hash identifier: u/dX9jyGS7AVIuH01/vU8pZhUNngZPPnvMvmp481C9E= Subject key identifier: 38:42:DD:40:0E:B5:FF:54:47:B2:BC:3F:17:2E:C5:9C:4E:8E:09:7C Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: CF Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F7C832A8721511EFA7D82D3EC4F9AE02.roa Signing time: Sat 21 Dec 2024 05:50:24 +0000 ROA not before: Sat 21 Dec 2024 05:50:24 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 9475 IP address blocks: 202.28.68.0/24 maxlen: 24 202.28.69.0/24 maxlen: 24 202.28.70.0/24 maxlen: 24 202.28.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 07:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Dec 21 05:50:24 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67665720-27e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:83:54:27:14:c5:31:ea:39:7e:2b:56:13:f2: ca:a3:de:9d:f3:57:ce:5b:d5:76:93:71:ad:68:b0: b7:06:b2:38:fe:1c:03:af:f9:33:69:70:eb:ed:0f: dd:e3:47:fd:c0:5b:e8:d9:1b:51:fb:bb:d7:aa:bd: 2e:be:9f:73:70:df:20:91:19:ef:98:da:97:b9:3e: 2e:4c:24:42:05:b6:95:19:08:6f:5e:9d:10:42:46: 5a:07:31:8b:ed:65:75:a9:f4:50:c4:89:17:f7:bc: 47:74:28:3e:41:0d:6a:5d:47:92:88:91:3c:b0:a5: 94:11:cf:d9:1f:64:65:cc:26:17:ec:e1:15:ae:52: 71:a4:99:fa:e5:73:a4:14:97:b4:b1:6e:bd:38:ae: 28:c6:54:21:88:3e:8b:73:fd:9a:b6:b9:39:f1:bc: b0:62:a6:24:fc:01:66:f2:98:22:3b:f1:dd:75:54: 8e:4f:66:ef:28:ee:fc:d3:31:c3:aa:a1:6b:a9:3f: 10:b5:14:91:c9:ff:6b:a4:5f:45:6c:8e:22:15:2e: 44:c8:c3:f4:91:82:ad:0b:f7:48:01:81:47:d4:43: c8:2f:20:4c:19:08:b0:93:76:32:12:0c:8e:cb:87: 5d:08:40:22:1c:db:ab:ef:c1:5e:71:8e:0b:72:a6: 6b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:42:DD:40:0E:B5:FF:54:47:B2:BC:3F:17:2E:C5:9C:4E:8E:09:7C X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F7C832A8721511EFA7D82D3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.28.68.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:d6:d5:c9:0b:25:46:2b:1e:8a:d6:fc:93:34:93:95:98:f7: 4b:01:50:95:be:6f:2d:55:e2:7b:49:1f:51:04:85:48:53:9b: e6:15:ea:30:2c:48:f4:92:15:4b:89:9e:7d:d5:63:87:de:da: 7d:94:62:d1:34:03:04:40:63:d0:c5:b3:0b:bf:2d:e6:bf:81: c8:a7:f8:08:ce:ba:8e:fe:4f:4e:b0:ae:ed:7d:d9:ed:31:f7: 6e:83:b3:0b:01:88:27:6e:de:a6:3a:54:f5:f8:19:9d:7e:94: 00:b5:51:30:02:1d:73:87:b2:21:e8:8e:dd:bd:07:fc:a3:fa: 9b:df:0a:f4:f8:ad:b2:da:60:18:4c:88:1d:c1:20:64:ec:86: 98:f4:9d:71:0e:18:30:96:97:bb:ec:ac:9d:9b:39:51:a9:27: 06:36:c2:df:a2:1c:87:67:e0:af:a8:a5:c5:0f:4b:4d:18:b8: d8:a1:e2:8e:d4:c6:8e:78:39:89:f5:57:a7:96:2a:86:73:dc: 5e:fe:5c:f9:5f:4e:b3:32:e5:0b:58:76:8b:36:7e:d9:b2:4c: 4a:42:06:b6:6d:ba:c2:3b:bd:5e:de:51:7c:0e:69:51:7f:c8: 86:6e:2a:60:af:36:47:de:5e:ea:c4:de:de:84:3c:3a:73:98: 9f:22:74:09 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB MzQ2MkUxMjYwHhcNMjQxMjIxMDU1MDI0WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzY2NTcyMC0yN2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0oNUJxTFMeo5fitWE/LKo96d81fOW9V2k3GtaLC3BrI4/hwDr/kzaXDr7Q/d 40f9wFvo2RtR+7vXqr0uvp9zcN8gkRnvmNqXuT4uTCRCBbaVGQhvXp0QQkZaBzGL 7WV1qfRQxIkX97xHdCg+QQ1qXUeSiJE8sKWUEc/ZH2RlzCYX7OEVrlJxpJn65XOk FJe0sW69OK4oxlQhiD6Lc/2atrk58bywYqYk/AFm8pgiO/HddVSOT2bvKO780zHD qqFrqT8QtRSRyf9rpF9FbI4iFS5EyMP0kYKtC/dIAYFH1EPILyBMGQiwk3YyEgyO y4ddCEAiHNur78FecY4LcqZr3QIDAQABo4IClTCCApEwHQYDVR0OBBYEFDhC3UAO tf9UR7K8PxcuxZxOjgl8MB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0 U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvRjdDODMyQTg3 MjE1MTFFRkE3RDgyRDNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALKHEQwDQYJKoZIhvcNAQELBQADggEBABvW1ckLJUYrHorW /JM0k5WY90sBUJW+by1V4ntJH1EEhUhTm+YV6jAsSPSSFUuJnn3VY4fe2n2UYtE0 AwRAY9DFswu/Lea/gcin+AjOuo7+T06wru192e0x926DswsBiCdu3qY6VPX4GZ1+ lAC1UTACHXOHsiHojt29B/yj+pvfCvT4rbLaYBhMiB3BIGTshpj0nXEOGDCWl7vs rJ2bOVGpJwY2wt+iHIdn4K+opcUPS00YuNih4o7Uxo54OYn1V6eWKoZz3F7+XPlf TrMy5QtYdos2ftmyTEpCBrZtusI7vV7eUXwOaVF/yIZuKmCvNkfeXurE3t6EPDpz mJ8idAk= -----END CERTIFICATE-----Generated at Fri Oct 24 00:42:30 2025 by rpki-client